search

cert-manager / infrastructure

cert-manager infrastructure
Apache License 2.0
5 stars 7 forks source link

Request a 1Password account for the cert-manager project? #30

Closed maelvls closed 6 months ago

maelvls commented 8 months ago

Up to now, we have been using Jetstack's and then Venafi's 1Password to store the various passwords for the shared accounts, such as:

A while back, we had written in https://github.com/cert-manager/infrastructure/blob/main/README.md#google-groups-cert-manager-maintainers:

cert-manager-maintainers is the ultimate decider of who's a recognised maintainer. All other memberships should be based off this group, and if a maintainer retires from the project, they should be removed from this group. There should be automation added to ensure that members of this group are: able to access any secrets they need (e.g. login credentials)

What if we were to ~request an open source team from 1Password~ request a CNCF-paid 1Password team?

Internal ref: https://venafi.atlassian.net/browse/VC-33449

To to:

SgtCoDFish commented 6 months ago

We discussed this today and agreed we'd try to use the CNCF 1password offering: https://contribute.cncf.io/resources/project-services/hosted-tools/

This is Maël's task now, we've agreed to proceed with this!

SgtCoDFish commented 6 months ago

NOTE: We'll also need to update the readme in this repo since it currently talks about credentials being in 1password

maelvls commented 6 months ago

I’ve sent the request for a 1Password team: CNCFSD-2290.

maelvls commented 6 months ago

I haven't heard back yet. I'll keep you updated here.

maelvls commented 6 months ago

From Daniel Krook:

Hi. We don’t handle 1Password on behalf of projects, but we point folks to where they can apply for accounts: https://github.com/1Password/for-open-source

I'll request an open source team to 1Password then 😅

maelvls commented 6 months ago

I've created the team https://cert-manager.1password.com and invited all 9 maintainers using the emails visible in https://groups.google.com/g/cert-manager-maintainers/members (is that the maintainers' canonical email addresses?)

FYI @cert-manager/milestone-maintainers

maelvls commented 6 months ago

All done!

Last step is to document the onboarding/offboarding of maintainers. I'll add that to the adam onboarding checklist so that I don't forget.

I'll open a PR on the infrastructure project to document this change.

maelvls commented 6 months ago

I've written the docs about the new 1Password team in https://github.com/cert-manager/infrastructure/pull/45. Closing now.